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Abstract 

Quantum Error Correction will be necessary for preserving coherent 
states against noise and other unwanted interactions in quantum com- 
putation and communication. We develop a general theory of quantum 
error correction based on encoding states into larger Hilbert spaces 
subject to known interactions. We obtain necessary and sufficient con- 
ditions for the perfect recovery of an encoded state after its degradation 
by an interaction. The conditions depend only on the behavior of the 
logical states. We use them to give a recovery operator independent 
definition of error-correcting codes. We relate this definition to four 
others: The existence of a left inverse of the interaction, an explicit 
representation of the error syndrome using tensor products, perfect 
recovery of the completely entangled state, and an information theo- 
retic identity. Two notions of fidelity and error for imperfect recovery 
are introduced, one for pure and the other for entangled states. The 
latter is more appropriate when using codes in a quantum memory or 
in applications of quantum teleportation to communication. We show 
that the error for entangled states is bounded linearly by the error for 
pure states. A formal definition of independent interactions for qubits 
is given. This leads to lower bounds on the number of qubits required 
to correct e errors and a formal proof that the classical bounds on 
the probability of error of e-error-correcting codes applies to e-error- 
correcting quantum codes, provided that the interaction is dominated 
by an identity component. 
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1 Introduction 



Within the past few years, quantum computation and communication have 
undergone a dramatic evolution. From being subjects of primarily aca- 
demic interest, they have become fields having an enormous potential for 
revolutionizing computer science and cryptography, as well as an impact on 
issues of national security, and even potentially commercializable applica- 
tions. This has resulted not only from the development of new algorithms 
such as quantum factoring but also as a consequence of recent experi- 
mental work on implementations of individual quantum gates |2|, ^, Q and 
of quantum cryptography ||5|. 

Unfortunately, the quantum states required to carry out a computation 
are very sensitive to the imperfections of the hardware, and above all, to the 
decoherence[^ caused by interaction with the environment (by environment 
we mean all the degrees of freedom which can have unwanted interactions 
with the computer). This fragility of a quantum computer]^, |8|, |9| is closely 
tied to its function: it acts as a sophisticated, nonlinear interferometer. 
The coherent interference pattern between the multitude of superpositions 
is essential for taking advantage of quantum parallelism, which is the key 
feature allowing one to explore aspects of an exponentially large number of 
possible solutions. 

To ensure that the fragility of quantum states does not destroy our abil- 
ity to extract the desired interference pattern requires techniques for cor- 
recting errors. It is interesting to draw a parallel between the state of the 
art in quantum computation today and that of classical computers in the 
40's. At that time it was often said that classical computers would not 
be very useful because errors in the computer itself would render the re- 
sult untrustworthy These doubts disappeared after the discovery of 
powerful error-correction techniques. Similar doubts are being expressed 
about the feasibility of the large scale application of quantum computers. 
These doubts are partially based on the belief that to perform an error- 
correction step, knowledge of the exact state of the computer is required. 
Such knowledge would destroy the quantum mechanical properties of the 
state. However, Shor|ll| has shown that in a restricted model of errors 
(similar to that which is assumed for classical error-correction) it is possible 
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to restore a state using only partial knowledge of the state of the quantum 
computer. Many codes have since been discovered which correct for specific 
interactions |13|, 0, [l^, |18| . As a result, it may now be possible to 

implement practical quantum memories and achieve very reliable quantum 
communication. These ideas have opened the path to a general theory of 
quantum error correction; the subject of this paper. 

This manuscript is organized as follows: In Section ^, we give an in- 
tuitive approach to the theory of quantum error correction and introduce 
some simple examples of the basic concepts. These concepts are formalized 
in Section |3|, where the notions of fidelity and error of a code are intro- 
duced. Instead of considering explicit encoding and decoding operators, 
we introduce recovery superoperators. These operators allow us to study 
the most general physical processes which can be used for error-correction. 
Quantum error-correcting codes which permit complete restoration of the 
encoded state can then be characterized. We give necessary and sufficient 
conditions for being able to recover the state of a system after it has evolved 
through a superoperator. These conditions depend only on the subspace of 
the code. Several equivalent characterizations are possible and we give four: 
One based on the existence of a left inverse of the interaction superoperator, 
one using the explicit representation of the coding space as a tensor prod- 
uct of the code with a quantum error syndrome, one exploiting the effect 
of the operators on a completely entangled state and finally one using an 
information theoretic identity. In Section Q we discuss several methods for 
implementing the recovery operator in practice and point out that if certain 
additional properties hold, the recovery operator can be substantially sim- 
plified. Next, in Section ^ we discuss independent interactions for strings of 
qubits (or other systems). These types of interactions are the natural gen- 
eralization of classical independent errors. After a short discussion of the 
physical interpretation and relevance we give a proof that it is not possible 
to obtain a one-error correcting code for one qubit using a coding space of 
only four qubits. This is generalized in a theorem about correcting e errors 
and a characterization of e-error-correcting codes. Finally we address the 
important issue of the fidelity of codes with imperfect recovery operators. 
We observe that a correct measure of fidelity must take into account any 
entanglements of the state. We show that the fidelity of the recovery of an 
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entangled state can be bounded below in terms of the pure state fidelity. An 
example is provided to show that our bound is best possible. We end this 
section by proving a bound on the fidelity of codes where one of the interac- 
tion operators is proportional to the identity. In Section ^ we conclude the 
paper with a final summary of the results and their implications. 



2 An intuitive approach 

Coherent quantum states are used in quantum communication and quan- 
tum computation. Both situations involve the manipulation of states by 
unitary operations where some desired information is eventually extracted 
from parts of the state by measurement. Quantum communication involves 
multiple parties with limited communication capabilities and focuses more 
on the transmission of states over potentially noisy channels, while quantum 
computation involves only one party and focuses on the unitary transforma- 
tions involved in achieving the final state. In both cases, loss of coherence 
occurs while executing the necessary operations, and when some of the sys- 
tems are either transmitted or temporarily preserved in memory. This loss 
of coherence results in a reduction of the probability of getting the correct 
answer after completion of the required operations. For short distance com- 
munication or small scale computations, the best way to avoid errors is to 
minimize this loss by isolating the state as well as possible and improving 
the accuracy of the unitary transformation used. For larger distances and 
long calculations errors in the state are inevitable and it is necessary to de- 
vise a scheme for returning the state to the desired one. Here we focus on 
the problem of preserving a coherent state subject to unwanted interactions 
in a quantum memory or channel. 

In classical communication and computer memories, corrupted informa- 
tion can be restored by introducing redundancy, for example by copying 



all or part of the information to be preserved! 19 1. Unfortunately, it is not 
possible to use a simple redundancy scheme for quantum states, primarily 
because the "no-cloning" theorem ||20|] prevents the duplication of quantum 
information. However, it has recently been realized [p!l|] that it is possible to 
correct a state against certain known errors by spreading the information 
over many qubits through an encoding. The goal is to find an encoding 
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which behaves in a specific way (described below) under evolution by the 
interaction superoperator. The behavior is such that it permits recovery 
of the original state. This works only for specific types of superoperators. 
In practice, error-correction schemes cannot correct all errors perfectly but 
only a subset of them. The quality of a scheme can be evaluated by its 
fidelity, i.e. the overlap between the corrected state with the wanted one. 

An essential part of the error-correction scheme is the encoding of the 
quantum information. Consider the simplest non-trivial case of encoding a 
single qubit. In this case the general state to be protected is of the form 
1^') = a|0) The idea is to map |^') into a higher dimensional Hilbert 

space (using ancilla qubits which are assumed to be in their |0) states ini- 
tially): 

(a|0) + /?|1))|000. . .) ^ ajOi) + /?|U) . (1) 

This defines the code. \0l) and are called the logical zero and the logical 
one of the qubit which we want to preserve, respectively. The new state in 
Eq.(|l]) should be such that any error induced by an incorrect functioning 
of the computer maps it into one of a family of two-dimensional subspaces 
which preserve the relative coherence of the quantum information (i.e. in 
each subspace, the state of the computer should be in a tensor product state 
with the environment). A measurement is then performed which projects 
the state into one of these subspaces. The original state can be recovered 
by a unitary transformation which depends on which of these subspaces 
has been observed. A fact to be established in Section ^ is that for every 
error-correcting code, the original state can be recovered by a measurement 
followed by a unitary operation determined by the outcome of the measure- 
ment. 

In order to find good encodings, it is essential to understand the types 
of error which can occur. We assume that the initial state is ^i, which 
undergoes interaction with an environment. This leaves the computer in 
the reduced density matrix 

Pf = Hm), (2) 

where $ is the superoperator associated with the interaction. In the case 
where the environment is not initially entangled with the system pf can be 
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written in the form 

/'/ = E^«/'*4- (3) 

a 

A choice of operators Aa can be determined from an orthonormal basis 

of the environment, the environment's initial state |e) and the evolution 

operator U of the whole system as follows: 

Aa = {lia\U\e) (4) 

With Aa written in this way, it can be seen that 

a 

The A a are linear operators of the Hilbert space of the system and describe 
the effect of the environment. The Aa are called interaction operators. Any 
family of operators Aa which satisfies Eq.@ defines a superoperator. Note 
that the choice of interaction operators is not unique, they depend on the 
choice of the basis \^a) of the environment. Two sets of interaction operators 
which differ only by this choice are physically equivalent. 

If there is no prior knowledge of the interaction operators which corrupt 
an encoded state, it is not possible to recover consistently. However, 
in many physical systems the Aa are of a restricted form. For example a 
reasonable approximation for systems of qubits is that the interaction with 
the environment is independent for each qubit. In this case the interaction 
operators are tensor products of one-qubit interaction operators. For small 
error rates, it might also be that one of the one-qubit interaction operators, 
say Aq, is near the identity. One can then define the number of errors of 
an interaction by counting the number of operators in the tensor product 
which are not ^o- If there is a sufficiently small number of errors, it may be 
possible to retrieve the original state just as for classical error-correction. 

Necessary and sufficient conditions for recovery of the state 1^,) are (see 
Section 

(Oi|4A|lL> = 0, (6) 
(Oi|4A|OL) = (7) 



6 



The first condition states that the logical zero and one must go to orthogonal 
states under any error. The second one implies that the length and inner 
products of the projections of the corrupted logical zero and one should be 
the same. 

A sufficient but not necessary condition is that Eq.(|^) is zero if Aa and 
A), are different. This implies that each error maps the initial state to or- 
thogonal subspaces. Obviously this permits retrieval of the original state by 
projecting on these subspaces. The more general Eq.(^) leaves room for two 
different errors to be mapped on the same two-dimensional subspace. This 
possibility is allowed by the superposition principle of quantum mechanics 
but cannot occur in classical error-correction. 

For realistic quantum computers only a subset of possible errors can be 
corrected. An appropriate measure of the quality of a recovered code is the 
fidelity Fidelity is the overlap between the final state pf of a system p 
and the original state If the combined superoperator consisting of an 

interaction with the environment followed by a recovery operation is given 
by A = {Aq, . . .}, then the fidelity is 

Fi\^,),A) = {^^\pf\^^) = {^i\Aa\^i){^^\Al\^^) ■ (8) 

a 

It gives the probability that the final state would pass a test checking 
whether it agrees with the initial state. As we are thinking of encoding 
arbitrary states, we do not know in advance the state that will be used. We 
therefore use the minimum fidelity (that is the worst case fidelity) 

Fmin = min(^lpyl^) . (9) 

The best quantum code maximizes -Fmin- Hereafter we will drop the sub- 
script min to denote the fidelity of a code. 

We now turn to a simple but important example to illustrate some of 
the points mentioned above. We investigate decoherence|p, i.e. the ran- 
domization of the phase of the initial state The effect of decoherence is 
to decrease the size of the diagonal element of the density matrix in a basis 
determined by the interaction Hamiltonian with the environment. For one 
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qubit, decoherence takes the form 



=a\0) +P\1) ^ pi ap*e ^ \ 

\ 1/ I / Ml / r ^ a*/3e-T (3(3* j 

where (7 > 0) parameterizes the amount of decoherence. Decoherence 
can be understood in terms of the following interaction with the environment 

|e)|0) -|eo)|0) 

|e)|l) -|ei)|l). (11) 

with (eo|ei) = . Using the environment basis |/io) = |eo) and = 
(|ei) — e~'^|eo))/\/l — e~2T we obtain the interaction operators 

For a single qubit which is corrupted by decoherence the minimum fi- 
delity can be seen to be given by 

F = A^~l-l^... (13) 

where the last approximation is valid for small 7. 

In what follows we assume that the different qubits have independent en- 
vironments (a physically reasonable approximation) so that the interaction 
operators are tensor products of the ones given in Eq.(|l^). 

A one-qubit code to correct this type of error by using three qubits 



has been devised in ref.[^, 12|. To understand how it works, it is better to 



change the basis state of the environment to |^_|_) = (|eo) + |ei))/A/2(r+~e~^ 
and \p-) = (|eo) — \ei)) / \J2{1 — e~^). This gives the one qubit interaction 
operators 

where a+ = + e~'^)/2 and a_ = ^(1 — e~^)/2. In this basis, the effect 
of the environment is either to leave the system alone or flip the sign if the 
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qubit is in the state |1). The encoding has the form 



|0l) = (|0) + |1))(|0) + |1))(|0) + |1)) 

= (|0)-|1))(|0)-|1))(|0)-|1)). (15) 

This code is such that if one qubit is corrupted by the environment, then it 
is possible to detect it by using a majority rule. 

Assuming at most one incorrect qubit, the interaction with the environ- 
ment maps the initial state to one of the following possibilities: 

^+|0l) 

where the superscripts on the operator A_ indicate which qubit is being 
affected. A similar results applies to The recovery operator is the 

superoperator determined by the interactions 

R+ = {\0l){0l\ + \1l){1l\) 

= (|OL)(OL| + |U)(lL|yi 

Rl = (|0l)(0l| + |U)(1l|K2 

Rt = (|0l)(0l| + |1l)(1l|K3 , (17) 

where is the z Pauli matrix for the r'th qubit. In practice the recovery op- 
erator is implemented by first performing a measurement to determine which 
error has occurred. This can be achieved by using a series of controlled-not 
gates and measurements (with the possible involvement of ancilla qubits). 
The measurements establish the relative signs in Eq. (p!6|) . Note that these 
relative signs are the same for the logical zero and one after the same op- 
erator has acted and therefore the measurements collapse the system to 
two-dimensional subspaces. Once the measurements reveal which subspace 
has actually occurred, it is straightforward to recover the initial state with 
an appropriate unitary transformation. 

It is important to realize that this code corrects perfectly only if at most 



= «r(io)+ii))(io) + ii))(io) + ii)) 

= aK/'(|0)-|l))(|0) + |l))(|0) + |l)) 

= a^^a^/^ (|0) + |1))(|0)-|1))(|0) + |1)) 

= aV/^(|0) + |l))(|0) + |l))(|0)-|l)), (16) 
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one error occurs. In general however, decoherence can induce more than one 
error (as can be deduced from the fact that the Aa in Eq.([T^) do not form 
a superoperator). As long as the decoherence is small {i.e., 7 is small), the 
probability of having two or more errors will be much smaller than that of 
having one error. The minimum fidelity can be bounded below by 

F = 1 - (a^ +3a2a+) f« 1 - ^7^ + ... (18) 

This scheme is thus an improvement over the single qubit evolution for a 
small enough 7. Using a 2n + 1 bit generalization of the code in Eq.([l5|), it 
is possible to have fidelity be given by 1 — 0(7"^^) for small 7, but with a 
potentially large hidden constant. 

3 Quantum error-correcting codes 

3.1 Fundamentals of quantum error-correcting codes 

It is now time to give a formal treatment of quantum codes. We want to 
preserve a /j-dimensional subspace against some known errors. This is ac- 
complished by mapping the states into a larger, n-dimensional Hilbert space. 
First, let us define an {n,k)- quantum code as a A;-dimensional subspace of 
an n-dimensional Hilbert space. The latter is called the coding space and 
denoted by Tl. The symbol C is used for the code. An encoding operator for 
C is a unitary operator E from a fc-dimensional Hilbert space Q onto C. A 
decoding operator is a right inverse of an encoding operator. 

In practice, k and n are often powers of two, k = 2'^ and n = 2^ with 
d < r, and Q and 7i are tensor products of qubits. The encoding operator 
can be implemented as a unitary operator on Q®*^® Q®''"'^® Q*^", where the 
last factor has a ancillary qubits whose state before and after the operation 
is intended to be |0). The ancillas can be used as scratch pad memory during 
the process of measurement needed to recover C. In this case, the space Q to 
be encoded is a "standard" subspace of the coding space, and the encoding 
operator maps it to the intended code. Note that there are many encoding 
operators which have the same effect on Q. This is because the encoding 
defines only a part of the unitary transformation needed. Which choice is 
actually used depends on efficiency (e.g. the number of gates in a physical 
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situation) as well as the desired error-correcting properties. 

For the purpose of discussing error-correcting properties of codes, instead 
of focusing on encoding and decoding operators, we introduce the recovery 
superoperator. A recovery (super) operator 7^ is a superoperator on the 
coding space. A recovery operator is used to restore a state to the code 
after it has been affected by an interaction with the environment. Note that 
except for their intended use, recovery and interaction operators are the 
same type of object. 

Use of a recovery operator instead of an explicit unitary operator allows 
us to ignore many of the details of implementing a code which are not rel- 
evant to its error-correcting properties. It is general enough to represent 
potentially unintended or unavoidable side-effects of the more traditional 
decode/encode operations. In practice, a recovery operator may be imple- 
mented by a combination of unitary operations and classical measurements 
or by unitary operations alone. 

A quantum error- correcting code is a pair {C,TZ) consisting of a quan- 
tum code and a recovery operator. The correcting properties of an error- 
correcting code depend on the interaction with the environment. Let A be 
a family of linear operators as described in Eq. (^) . The fidelity of the code 
is determined by the fidelity of the composition TZA restricted to C. The 
fidelity of the error-correcting code is thus defined as 

F{C,nA) = min F(|^),7^^) 

|*>ec 

= min ^|(vI/|i?,A|^)P, 

where the Rr are the interaction operators for the superoperator TZ. It is 
useful to consider families of linear operators which do not necessarily satisfy 
the superoperator constraint Eq.(^). In that case the fidelity as defined 
above is not correctly normalized and instead we consider the error of the 
code. The error of the code is defined as 

E(C,TZA) = maxY\(RrAa- mRrAJ'if))]'^)]^ . 
Figure 1 gives a geometric picture of the notion of fidelity and error of a 
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code. The error of the code makes sense for arbitrary famihes A- For super- 
operators, it is given by 1 — F{C,TIA), which is the worst-case probabiUty of 
not observing the desired state if we were to attempt to measure it directly. 



Figure 1. Geometric relation between fidelity and error. The fidelity is 
the sum of the projections (for each interaction operator) along the state. 
The error gives the "distance" from the original state for each interaction 
operator. 

We first focus on the ideal case where the code corrects all errors, i.e. 
when the initial state is recovered perfectly for all operators in A. The case of 
imperfect recovery will be discussed later. The pair (C, Tt) is an A-correcting 
code if E{C, TZA) = 0. Note that this is equivalent to saying that for each 

Aa, E{C,TZAi) = 0. Thus we can speak of ^-correcting codes even if A is 
not finite. In the next subsection we use characterizations of ^-correcting 
codes to slightly modify this definition by omitting explicit mention of the 
recovery operator. 

Before we characterize ^-correcting codes, let us turn the problem around 
and ask what the family A{C, TZ) of operators A for which {C,Tl) is A- 
correcting looks like. The next result gives an answer. 

Theorem 3.1 The operator Aa is in A{C, TZ) iff when restricted to C, RrAa = 
Kal for each Rr G TZ. The family A{C, TZ) is linearly closed and {C,TZ) is 
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A{C,TZ) correcting. 

Proof. To be ^a-correcting requires that for |^) G C, 

\{RrAa - mRrAam))m = 0. 

This imphes that RrAa\^) = Ar.a(|*))|^')- By hnearity of RrAa, A^d^')) 
cannot depend on \^). The rest of the theorem is immediate. ■ 



3.2 Characterizations of ^-correcting Codes 

So far we have defined ^-correcting codes both in terms of the code and the 
recovery operator. One of the most important consequences of the character- 
izations of ^-correcting codes below is to allow defining ^-correcting codes 
without reference to the recovery operator. Let {ii) denote the elements of 
an orthonormal basis of the code C. The first characterization has proved 
the most useful so far for finding good codes by systematic searches such as 
that in or by exploiting linear techniques from the classical theory of 



error-correcting codes |12, IT 



Theorem 3.2 The code C can be extended to an A-correcting code iff for 
all basis elements lii), iJi) j) '^'^^ operators Aa, vlf, in A 

{iL\AiAb\iL) = {jL\AiAb\jL) (19) 

and 

{iL\AiAb\jL) = 0. (20) 



These conditions are more general than the ones given in [22| which 



are sufficient but not necessary. Since they are independent of a recovery 



operator, we can define an ^-correcting code as one which satisfies Eq.(19) 
and Eq.([20|) for any one (and therefore every) basis of the code. 
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Proof. Assume that (C, TZ) is an ^-correcting code. We compute {iL\AlA},\jL) 
explicitly. 



(iil^AIji) = {iL\AllAh\jL) 

= {iL\AiY,RlRrAb\jL) 

r 

= Y.i^L\AiRlRrAb\jL) 

r 

= ^{iL\>^ar>^br\jL) 

r 



where we have used the superoperator properties of IZ and Theorem 3.1. 
The forward direction of the theorem now follows by inspection. 

Let us now show how to construct a recovery operator given that Eq.(p!9|) 
and Eq.(pOD hold. Call V* the subspace spanned by Aa\iL) (for all a). By 
Eq.(|20|), the Vj are orthogonal subspaces. Let be an orthonormal basis 
for v. We shall shortly impose additional conditions on the For now, 
observe that the are mutually orthogonal. Hence there exist unitary Vr 
which return to the corresponding state 

yrH) = \iL)- (21) 

The recovery operator is given by the interaction operators 

7^ = {o,i^l,...,i^„...}, (22) 

where O is the projection onto the orthogonal complement of 0j V*, i.e. the 
part of the Hilbert space which is not reached by acting on the code with 
the Aa, and 

Rr = VrY.\ul){ul\. (23) 

i 

That 7^ is a superoperator follows from the observation that it is a sum of 
orthogonal projections followed by unitary operators where the projections 
span the Hilbert space. 

To ensure that TZ recovers the state, we need unitary operators Ui such 
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that Uilu^) = l^l) and for all Aa, UiAa\OL) = ^al^i)- The existence of 
unitary operators satisfying the second condition follows from Eg. ([T^) , ac- 
cording to which the innerproduct relationships between the AalO^,) and the 
Aalii) are identical |^. Given such Ui, can be made to satisfy the re- 
maining condition by choosing the basis of and defining \ = Uilu^). 

We show that TZ does indeed recover the state, i.e. for ^I' € C, i?r^a|^) 
is proportional to ^. We can write 

Aa\^) = AaY,ai\iL) 

i 

= ^OiAallL) 

i 

i 

= Y.^,f3l\vi), (24) 

where the identities define Oj and (3^^. by expansion in terms of the corre- 
sponding basis elements. The introduction of the operators Ui is what allows 
us to obtain the expansion in the last line where the /3's show no dependence 
on i. We can now compute RrAa\^) as 

RrAa\^) = Y.^rK){K\T.^Ays) 

i j,s 

i 
i 

= /?a.l*)- (25) 

This implies that RrAa is a multiple of the identity operation on C. Since 
O is null on all Aa\jL), the fact that 7^ is a recovery operator for A follows. 

■ 

An interesting observation about Eq. (|l9|) is that it does not require that 
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the logical states have zero inner products when two different interactions 
are applied, but merely that the scalar products are the same. For two- 
dimensional codes, this means that parts of the subspaces spanned by AalOi) 
and Aalli) to which the states are mapped may overlap. If we identify 
each Aa with a distinct error, then this possibility allows the correction of 
more than one error per two-dimensional subspace. This is a novel feature 
of quantum error-correcting codes which does not exist in their classical 
counterparts. The fact that non-trivial overlap is possible is demonstrated 
by the following example. 

Let us consider the code {\0l) = |00), = subject to the inter- 
action operators 



An 



/v^T^^ 

10 

1 

^/l - 2qJ 



( y/qj2 



^/qj2 

V 



\ 



mi 



(26) 



A. 



^fqp- 



-\fql2 





(27) 



\ 


for some fixed < g < 1. It is easy to check that these operators form 
a superoperator. They are linearly independent and therefore cannot be 
reduced to a smaller, equivalent interaction. The A^ map the logical states 
as follows: 



|0l) ^ vT^lOO) , ^g/2(|00) + |10)) , V'g/2(|00) - |10)) 

lU) ^ yT^|ll),^(|01) + |ll)),y^(|01)-|ll)). (28) 

Naively one might expect that the states on the right hand sides are linearly 
independent, but in fact, one of them is linearly dependent on the other two 
in each case. We therefore need only two recovery operators to retrieve the 
initial state. They are given by 



i?o = |00)(00| + |11)(11| ; Rx = |00)(10| + |11)(01| . 



(29) 
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Whether there are any such examples of practical significance is under in- 
vestigation. 

We return to the problem of characterizing quantum error-correcting 
codes. If ^ is a superoperator, then a simple characterization of ^-correcting 
codes is in terms of left invertible superoperators. 

Theorem 3.3 Let A be a superoperator. C is an A-correcting code iff the 
restriction of A to C has a left superoperator inverse. 



Proof. By Theorem 3.1, C is an ^-correcting code iff there exists a super- 
operator TZ such that on C, RrAa = Xral for all r and a. This means that 
TZA is a superoperator equivalent to the identity (by a change of basis on 
the environment). ■ 

Interestingly, to check that an operator B = TZA has error on any state, 
it suffices to apply / i3 to a completely entangled state. In other words, 
checking that the operator B has zero error for all pure states of a system 
is equivalent to checking only one state which is completely entangled with 
a copy of the system. 

Theorem 3.4 B has error on C iff I BJ2i = XJ2i 

The equality in the theorem is to be interpreted in terms of state ensem- 
bles: Two state ensembles are equivalent iff they induce the same density 
matrix. 

Proof. Let Br be a member of B. Then I ® is a member oi I ® B. If 
B has error on C, then 

I ® BrY,\iL)\iL) = Y.\^L)Br\iL) 

i i 

= ^\iL)K\iL) 

i 

= Xr^\iL)\iL)- 

i 

This implies that the ensemble I <^ BJ2i is equivalent to a scalar 

multiple ofY.i\iL)\iL)- 



17 



Now suppose that the identity in the theorem holds. The fact that the 
left hand side is equivalent (as a set of states) to the right hand side implies 
that for each r, 

I ® Br^\iL)\iL) = K^\iL)\iL)- 

i i 

By applying the operator I ® B,. to each summand and using the fact that 
the \iL)\iL) are independent, this gives Br\iL) = Wl)- The result follows. 

■ 

An interesting and concise method of describing a code which hides the 
recovery operator without removing it entirely involves expressing the coding 
space as a sum of two terms, the first of which is a tensor product of the code 
with another space. As we will see, this perspective has several interesting 
consequences. One of these consequences is the explicit distinction between 
correctable versus detectable errors. 

Theorem 3.5 C is an A-correcting code iff there is an isomorphism o" : ~ 
C 0£ such that for all Aa £ A and l^*) G C, Aal'i') = o-(|^') \£{a))) 
for some vector \£{a)) depending on Aa alone. 

The idea is to ensure that the effect of the environment is clearly sepa- 
rated from the state to be preserved. Thus £ takes up all the information 
from the environment and the final state in £ encodes the environment's 
effect on the code. The final state in £ is called the error syndrome. T> is 
the summand of 7i which is normally never reached by A, but which can 
be used for error detection if so desired. A perfect quantum code is one 
for which T> is empty and the \£{a)) span £. Note that in many cases of 
interest, a multiple of the identity map is in A (given by for example). 
In this case, C = a{C ® |<S(0))). 

Proof. Let C be an ^-correcting code in 7i. We use the notation from 



the proof of Theorem 3^. Let P be the orthogonal complement of the 
subspace spanned by the Let £ be the Hilbert space spanned by 

{|^r)}r-- The isomorphism between Ti and C ® £ ® is established by 
letting a{\iL)\yr)) — Wr) and defining a to be the identity map on V. Let 
Aa(^ A and l^-) = EjajliL) G C. Write Aa\QL) = Hrf^raH)- Applying 
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the properties discussed in the proof of Theorem 



3.2 



gives 



jr 

j 

r 

Thus we can let \£{a)) = J2r ParWr) to prove the "only if" part of the 
theorem. 

For the other direction we show how to construct a recovery operator 
which restores the code after action of A. Let be a basis of £ and let 
Rr be the projection onto a{C followed by a unitary operator which 
maps cr(|ii) ® jf^)) to Let O be the projection onto cr{V). Then the 

conditions on the Aa imply that RrAa is a scalar multiple of the identity, 
which gives the desired result. ■ 

Finally we mention that for superoperators there is a simple infor- 
mation theoretic characterization of ^-correcting codes due to Nielsen and 
Schumacher [^]. Let |e) = X^i be the perfectly entangled state 

of the code from which we can define the density matrices: 

p= and p = Y,I®Me){e\Ai®I. (30) 

^ ai 

The entropy of a density matrix a is denoted by S{a). 

Theorem 3.6 Let A he a superoperator. Then C is an A-correcting code iff 
S{p)-S{p)=logk. 

The quantity S{p) — S{p) is introduced as a natural notion of mutual 
information in |^]. The proof of the theorem can be found there. 

4 Implementing Recovery Operators 

Let us begin by observing that the recovery operator constructed in Theo- 
rem consists only of projections followed by unitary operators conditional 
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on the result of the projections. Implementing such an operator is concep- 
tually straightforward: First you perform a measurement corresponding to 
the set of projections, then, depending on the outcome of the measurement, 
you perform an appropriate unitary operation. However, in quantum com- 
putation, it is customary to assume that direct measurements can only be 
performed in a standard basis of each system. This means that a suitable 
unitary transformations must be applied first in order to rotate the mea- 
surement subspaces. 

To discuss various methods for implementing the recovery operator we 
need the notion of a unitary extension. Let W = X^j^-fj) where the Pi 
are orthogonal projections, and PjvJViPi = for i ^ j. Then a unitary 
extension of W is any unitary W' which agrees with W on the range of the 
Pi. The conditions ensure that W' exists. 

Let TZ be described by the interaction operators {UqPo, . . . ,Ur^Prm)i 
where the Pr are projections onto the orthogonal subspaces Vr, and the Ur 
are unitary. Let be a separate (ancillary) system with standard basis 
{vm)- Let Vr he a unitary operator on j\4 with the property that K-IOa/) = 
Itm) (i-e. Vr is a unitary extension of {vm) {Om\)- The operator V = J2r ^r'i^ 
Vr is unitary and has the property that Vr |0m) goes to Vr {tm)- (This 
is a generalization of the standard controlled-not operations in quantum 
computing.) If M. starts in the state \0m), then we can perform TZ by first 
applying V, then measuring Ai in the standard basis and finally applying 
Ur to the coding space if the outcome of the measurement is {vm). This is in 
fact the implementation of the recovery operator suggested in |11, 12]. If it 
is necessary to represent the recovery operator by unitary operators without 
measurement, then the measurement and the final rotation step can be 
replaced by application of the unitary operator J2r ® \^m) {fM\- However, 
note that with this procedure, the information about the environment's 
interaction with the coding space is transferred completely to M. The only 
effective way in which M can be reused for subsequent operations is to 
dissipate that information by a measurement. 

Usually when using a code, there will be a time when it is desirable to 
decode the state into a separate system C of the same dimension as C with 
standard basis \i). The purpose of decoding the state in this fashion may be 
to measure it, or to perform unitary operations which cannot easily be ap- 
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plied in the coding space directly, or as the first step in a recovery operation 
where the second step is to re-encode the state. Given an implementation 
of the recovery operator, one can perform this decoding by following the re- 
covery operator with the application of a unitary extension of the operator 
J2i |Ol)(*l| K)(0| to (8) |0). This in effect swaps the state from C to C 
after recovery. 

Here is a potentially useful method for decoding without use of ancillas. 
We use the notation from Theorem 3.2. Let Qi be the projection onto V*. 
First apply a unitary extension of J2i Qi to IV') (X" |0) in TL^C . Then 

^-Pply Z]j Finally (if desired) measure H. to put the coding system 

into a known state. As an alternative to the last unitary transformation, 
one can measure 7^ in a special basis and follow the measurement by a 
unitary operation on C . One choice for such a basis is given by an arbitrary 
extension of the set 



\eir) = y LO 



j 



where w is a /c'th root of unity (we have neglected normalization factors). 
If the outcome of the measurement is \eir), then the unitary transformation 
^jOJ~'^'^\j){j\ needs to be applied to C to complete the decoding step. If 
a. k X k Hadamard matrixjl^ exists, one can choose the coefficients of 
and of \i){i\ to be 1 or —1. 

In many applications, C is in fact a subsystem of TC, that is TC = C <^ £' . 
In that case we can decode a state by using the isomorphism of Theorem 3.5. 
First identify £ with a subspace of £' and apply a unitary extension D of 
the operator which takes a{\iL)\a)) to This can be followed by a 

measurement of £ to dissipate the error. Note that in the case where the 
identity map is corrected, such that C = a{C \ao)), we can apply D^^ to 
I V') |ao) to perform the encoding operation. Now the same circuit can be used 
for both encoding and decoding. Recovery can be accomplished by applying 
D, a measurement of a restoration oi £ to |ao) and finally re-encoding 
using D~^. The first example of such a configuration was given in [15|. 

We end this section by making a comment on codes such as the ones sug- 
gested by Steane [12| and Calderbank and Shor |13]. These codes have the 
property that TC can be represented as in Theorem 3.5, with the additional 
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property that for a basis \ei) of £ and unitary operators Uij, 



j 



independent of -0. This imphes that each subspace (t(C (g) \ei)) is an A- 
correcting code. This property is particularly useful in iterated applications 
of the code, where recovery operators and interactions alternate. Effectively, 
it suffices to project the state after the interaction onto the subspaces a {0 
|ei) by using a recovery operator consisting of these projections. The result of 
the projection is a correct state in an alternative code, so it is not necessary 
to follow up with a unitary operator. It is however necessary to keep track 
of the sequence of outcomes of the projections, since the Uij change the 
required interpretation of the logical basis of C. 

5 Properties of codes correcting independent in- 
teractions 

5.1 Independent interactions 

It is difficult to discover quantum error-correcting codes for general types of 
interactions. In the classical theory of error-correction, it is often assumed 
that errors occur independently for each symbol. This assumption seems 
physically reasonable in many situations. In cases where it is not strictly 
true it can still lead to a systematic approach for finding high-fidelity error- 
correcting codes. We now discuss the implications of a similar assumption 
for the quantum theory. In this case, the set of symbols is replaced by a 
fixed system such as the qubit. The coding space is a tensor product of in- 
dependent systems. To say that the interaction operator acts independently 
on each component system means that it is a tensor product of single system 
interactions. We shall focus on the case where each system is a qubit to sim- 
plify the discussion. Generalizations to larger systems are straightforward. 
Let H = Q®*" = Qi ® . . . ® Qr- Given a one qubit superoperator A, we say 
that A^'^ acts independently on each qubit with 



{yljj (8) . . ■}ji,i2,... • 
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The assumption of independent interaction is reasonable for the case of 
spontaneous emission where we can take A to consist of 



^°"(o yr^) '^'"(o I)- 

For phase randomization (decoherence) independence is a good approxima- 
tion when the effective wavelength of the environment is smaller than the 
interspacing of the physical system used as qubits. For example if the en- 
vironment is modeled by a bath at finite temperature, the condition is that 
the De Broglie wavelength is smaller than the qubit's interspacing. The 
one-qubit phase randomization interactions were given in Eq . (|T^) . 

As in classical error-correction with fixed error-rates, it is in general not 
possible to correct A'^^ with error 0. And just as in the classical case, it 
is useful to consider codes which correct well the "important" members of 
A'^^ , that is those which strongly affect only few of the qubits. This leads 
to the study of e-error-correcting quantum codes. 

An operator A acting on 7i is said to induce (at most) e errors if it is 
an r-fold tensor product of one-qubit operators where all but e of them are 
the identity. An e-error-correcting code is one which can recover from all 
interaction operators inducing at most e errors. 

To discuss e-error-correction in more detail, we need linear bases for the 
one-qubit interactions. One such basis with the additional property that 
each operator is unitary is given by 

^°=(i ?) ^^^=(i -i) ^^^=(? I) ^^^=(? ~o)- 

(31) 

These Aa operators physically correspond to: 0) leaving the system un- 
changed, 1) changing the sign of the bit if it is in the |1) state, 2) flipping 
the bit 3) flipping the bit and changing its sign if it was in the |1) state. 
Another useful basis for the one qubit interactions is given by 

The operators Aq and Ai implement an ideal measurement on the qubit. 
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A2 and ^3 implement an ideal measurement followed by a bit flip. 

The basis in Eq. (^) is the one used in [^] to find the one-error-correcting 
five-qubit code. 

5.2 A Simple Lower Bound 

One of the simplest lower bounds on the number of classical code words 
given that at least e errors are to be corrected is the Hamming bound. It 
is obtained by counting the number of words within e errors of each 
codeword. The product of b^, and the number of codewords cannot exceed 
the size of the coding space. 

For quantum codes, one can attempt a similar argument. Assume that 
we have written the superoperator ^ in a minimal form so that each Aa is 



independent. In the special case where Eq.(19) are solved by setting both 
sides to 0, it is clear that all states of the form Aa\iL) are independent. 
This implies that the total dimension of the space has to be at least k\A\. 
This argument fails because no such independence is implied by Eq. (|l^) and 
Eq. ( |20| ) . One can however use Theorem |3.5| to see that the total dimension 
has to exceed ke, where e is the dimension of £. If a lower bound on 
dim(^ol^)) • • • ) ^am\^)) is known, then this is a lower bound on e. 

As an example, consider the question of whether there are (2^, 2)-codes 
with r < 4 qubits such that any operator which induces at most one error can 
be corrected. A natural basis for this family of operators can be derived from 
the basis in Eq.(^) and consists of 1 + 3r operators. Solving 2(1 + 3r) < 2*" 
suggests that r must be at least 5. See [^] for an example of a code with 
r = 5. As was pointed out in the previous paragraph, this argument is 
incomplete. 

We present here a different argument which proves that r = 5 is the 
minimum for one-error-correcting codes. Assume a code with r = 4 exists. 



We use the necessary and sufficient conditions given in Eq. ( 19 ) and (^) and 
expand the logical zero and one as: 

|0l) = ^aijki\ijkl) 

ijkl 

= Y.(^iJki\ijkl) . (33) 

ijkl 
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and use the interaction operators described in Eq.(^) Let us define the 
reduced density matrices 

_ \ ^ * 

Pi'j'ij — / , '^i'i'kl'^iikl 
kl 

Pi'j'ij = '^Pi'j'klPijkl ■ (34) 
kl 

Using those operators which induce an error on the last two qubits in 
Eq.(|2q) we get 



X! "ijOoAjOO - 
oi*jioPijoo = 

= 0, (35) 

u 

from which we conclude that the density matrices are orthogonal, i.e. 

{P^P^)iji'j' = X! ^ijkl X! <^i"j"klPi"j"k'l' Pi'j'k'l' = 0. . (36) 
klk'l' i"j" 



= by Eq.(35) 

On the other hand Eq.(|^) implies that these two density matrices are equal: 
Using those operators which induce an error in the first two qubits we get 

^aooij-aooii = ^PoQijf^mj 

ij ij 
ij ij 

^aliijauij = ^PnijPuij , (37) 

ij ij 
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from which we deduce 



_ \ ^ * 

Piji'j' — / . O^iikl'^i'i'kl 
kl 

= X! PijkA'j'kl 
kl 

= plji,j, . (38) 

Eq.(p6|) and Eq.(^) are inconsistent and imply that no such code exist. 

The argument presented above can be generahzed to the following the- 
orem: 



Theorem 5.1 A (2^,fc) e- error- correcting quantum code must satisfy r > 
4e + [log k] . 

The task of proving this theorem is much simplified by characterizing e- 
error correction in terms of the reduced density matrices of the code words. 
Let the qubits of the coding space be labeled by 1, . . . , r. For [/ C {1, . . . , r}, 
let p{\x), U) be the reduced density matrix of \x) on the qubits labeled by 
elements of U . The complement of U is denoted by U . 

Theorem 5.2 C is an e- error- correcting code iff for all U C {!,..., r} 
with \U\ = 2e: i) for all i,j, p{\iL),U) = p{\jL),U) and ii) for i ^ j, 
p{\iL),U)p{\jL),U)=0. 



The proofs of Theorems p.l\ and |5.2| will be given elsewhere using a 



straightforward generalization of the techniques in the earlier proof of the 
bound on one-error-correction. 



5.3 Relationship between the pure state and entangled state 
fidelity 

We have studied the recovery of corrupted states using error-correction 
codes. It is anticipated that the states to be protected involve only a subset 
of the entangled qubits of the computer or communication channel. This 
means that in discussions of fidelity and error, the whole state, not just the 
component being protected, must be considered. Naturally we can compute 
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the fidelity of a code taking into account any part of the state not directly 
involved in the interaction and recovery. The worst case fidelity for such 
states is referred to as the entangled state fidelity to distinguish it from the 
pure state fidelity introduced earlier. 

If the pure state fidelity after recovery of the coded subsystem is one, 
then the entangled state fidelity is one also; it does not matter if the state 
is pure or if it is entangled with other systems. This observation is invalid 
if we have imperfect fidelity. 

Theorem 5.3 If the pure state fidelity is Fp = 1 — e, then the entangled state 
fidelity is F^, > 1 — 3e/2. There are examples where this hound is achieved. 

Proof. We give the proof for the case where the system is two-dimensional. 
We have 

Fr,= m\n mpm = 1- e, (39) 
and we would like to put a bound on the entangled state fidelity 

Fe= min {^e\Pe\^e)- (40) 

Here p and pe are the final density matrix after interaction and recovery if 
the initial state is |^') and |^'e) respectively. Write the entangled state in 
the Schmidt basis as |^'e) = Yl,i ^/Pi\'4''i)\'4'V') (the label C characterizes the 
system on which we want to do error correction and the label 7i the system 
with which it is entangled). We assume that only the system C is affected 
by an interaction with the environment and subsequent recovery and that 
the system Ti has trivial dynamics. In this case the interaction operators 
are tensor products of the identity operator for the system TL and the ones 
given by the interactions for the system C. We can therefore rewrite Eq.(|40|) 
as 

= ^Kp,(V'f l^alVf I^IV'f ) • (41) 
ij,a 

To obtain the bound we calculate the pure state fidelity for a superposi- 
tion of the form ^/^V'l + ^^^^/P2'4^2- Thus 

Fp < F(VPrV'f + e*'VPi^2) 
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a 

{Vp~i€ + e''VP^4\^i\VP^i^^i + e^'vP^V-^) . (42) 
We can now average uniformly the last equation over all values of 9 to get 

Fp < F,+p,p2{{iPl\Aa\4){4\AM) + (V'^l^a|V'?)(V'?l4lV'2)) • (43) 

Finally, Eq.(^) puts a bound on the last term in Eq.(43) using the normal- 
ization of the interaction operator, i.e. 

J2{lPf\AM){^P'i\AM)<l. (44) 

i,a 

(Note that the expression is a partial trace of a density matrix. The trace 
is partial because the interactions may take the original state into a larger 
space containing C.) By expanding the sum over i and noting that 1) the 
term with z = 1 is at least 1 — e by the definition of pure state fidelity and 
2) all the terms are positive, we conclude that the terms with i ^ 1 are 
bounded by e. The largest achievable value for piP2 is 1/4. This gives 

i^e>l-|. (45) 

For the example of decoherence in Section |2|, it is possible to show that 
Fe = Fp. The following example shows however that the bound in Eq.(|45|) 
can be achieved. Consider the interaction consisting of scalar multiples of 
the Pauli spin matrices. 



We show that for this example, F{A) = ^ and Fe{A) = 0. Let |n) = 
a|0) + e*^/3|l) with a and f3 real, and + /^^ = i. The fidelity of A is 
obtained by maximizing the following expression 

^{\{u\a^\u)\^ + \{u\ay\u)\^ + \{u\a^\u)\^) 



^ ((2a/3cos(&))2 + {2a(3sm{e)f + {a^ - P^f^^ 
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1 

3' 

Hence F{A) = |. To show that Fe{A) = 0, apply A to the second system 
of the completely entangled state |e) = ^(|0)|0) + |1)|1)). We get 

1 1^ (7x\e) 
I <E) cTyle) 
I (g) az\e) 

These states are all orthogonal to |e), whence Fe{A) = 0. Thus this example 
achieves equality in Eq.(^) and our bound is the best possible. ■ 



= — (|0)|1) + |1)|0)), 
= -1=(|0)|1)-|1)|0)), 
= ^(|0)|0)-|1)|1)). 



5.4 Bounds on the fidelity of error-correcting codes for in- 
dependent interactions 

Let ^ be a one qubit interaction of the form A = {Aq, Ai, . . .} with Aq close 
to the identity in some sense. In this case we would hope that an e-error- 
correcting code on n qubits reduces the error after independent interactions 
of each qubit with A. That this does indeed hold is an important observation 
for the application of these error-correcting codes. We are about to show 
that in the case where Aq = y/1 — pi, the classical bounds on the probability 
of error in the corrected code do apply, as has been informally discussed by 



Calderbank and Shor |13|, Steane |12| and others. When is not a scalar 



multiple of the identity, then additional terms must be added to the bounds. 
We defer the discussion of this case to future papers. 

Assume then that A = {^l — pi, Ai,. . .}. Denote A' = {Ai, . . .} and 
note that the strength of A' is 

= sup^ {x\AlAi\x) = p. 



\x) 
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Let C C Q^^ be an r-qubit e-error-correcting code with recovery operator 
TZ. To estimate the error after recovering from , write 

0<k<r U<Z{l,...,r},\U\=k 

with the obvious interpretation of the tensor products and which system each 
factor is acting on. Let Ajj = i'^ieuA') refer to the ensemble of 

operators obtained by letting / act on the qubits in U and A' on the qubits 
not in U. By the properties of the recovery operator, for \U\ < e, the error 
due to TZAu is 0. Thus it suffices to bound the error of the remaining terms 
in the sum for the interaction. We do this by assuming that the error in each 
summand is maximal. That is, the contribution to the total error by Au is 
bounded by the strength of Au given by the maximum value of |^[/|a:)p. 
The strength of the tensor product of operator ensembles can be computed 
using the next lemma. 

Lemma 5.4 Let Bi and B2 be operator ensembles. Then \Bi (8) = 

WW- 

The lemma can be proved by diagonalizing B\Bi = bI-Bh and 
BlB2 = EiBlB2i. 

We deduce that the strength of Au is p'*^'. By evaluating the sums over 
the C/'s we obtain the following result: 

Theorem 5.5 Let TZ be the recovery operator of an e-error correcting code 
C on n qubits and A = {^/T^^L,A'} a superoperator on one qubit. Then 

F{c,nA®') > 1 - E fl)/(i -f )'■"'• 

k>e \ } 

Note that for applications involving entanglements, the bound needs to 
by modified in consideration of the relationship between pure state and 
entangled state fidelity. 
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6 Conclusion and future work 



We have laid the foundations for a theory of quantum error-correcting codes 
by providing a general definition of quantum codes and by characterizing 
those which can correct known interactions with zero error. The main fea- 
tures of our approach include treating a code solely in terms of its subspace in 
a larger Hilbert space and defining decoding operations in terms of general 
recovery superoperators. This allows studying codes and their properties 
for arbitrary interaction superoperator and avoids explicitly dealing with 
decoding and encoding issues when studying the fidelity of a code given its 
recovery operator. The treatment in terms of interaction operators directly 
leads to the characterizations of error-correcting codes given in Section ^. 
The characterization in terms of how the operators map individual states 
(Theorem 3^) has proved particularly useful for finding new codes. 

Our approach is not confined to the study of codes which allow perfect 
reconstruction of the encoded states. As an example of what can be done, we 
formally defined e-error-correcting codes on strings of qubits and considered 
the effect of independent interactions. We showed that for interactions with 
an identity component, there is a natural way in which the classical bound on 
the error can be applied, as has been discussed informally by other authors. 
This justifies the effort that has been put into finding good e-error-correcting 
codes. We observe that this classical bound may be more pessimistic than 
necessary, but leave a careful study of the fidelity of various known codes to 
future work. 

We brought up the important issue of how reliable a predictor the pure 
state fidelity is for error propagation in entangled systems and showed that 
the entangled state fidelity is not much less than the pure state fidelity. The 
fact that it can be less is an important observation, lest one be deceived 
into believing that a fidelity of 1/3 might be adequate if not compounded 
by other errors on the same system. 

The study of imperfect fidelity codes is far from complete. Both the 
sources of introduced error, and its propagation when recovery is attempted 
many times require further study. Ultimately, these issues determine the 
circumstances when an advantage may be gained from using error-correction 
schemes. 
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We would like to finish by commenting on a general issue. The present 
work on quantum error-correction assumes that no errors are produced dur- 
ing operations. This is a reasonable assumption if the coding, recovery and 
decoding operations take a small time compared to the rate at which er- 
rors appear (i.e. the interaction strengths), and the error in the operations 
themselves is small compared to the error corrected by the code. We do 
not believe that this assumption will remain valid in the context of large 
scale quantum calculations. It is therefore important to take into account 
the fact that operations are imperfect. An important step in this direction 
has already been taken in [^]. There the particular case of correcting for 
decoherence (phase randomization) using the three-bit scheme presented in 
the introduction has been investigated. 
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